[ { "name_v5": "browser.allow_outgoing_connections", "value_v5": "true", "dynamic_v5": false, "description_v5": "Configure the policy for outgoing Neo4j Browser connections.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "browser.credential_timeout", "value_v5": "0s", "dynamic_v5": false, "description_v5": "Configure the Neo4j Browser to time out logged in users after this idle period. Setting this to 0 indicates no limit.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "browser.post_connect_cmd", "value_v5": "", "dynamic_v5": false, "description_v5": "Commands to be run when Neo4j Browser successfully connects to this server. Separate multiple commands with semi-colon.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "browser.remote_content_hostname_whitelist", "value_v5": "guides.neo4j.com,localhost", "dynamic_v5": false, "description_v5": "Whitelist of hosts for the Neo4j Browser to be allowed to fetch content from.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "browser.retain_connection_credentials", "value_v5": "true", "dynamic_v5": false, "description_v5": "Configure the Neo4j Browser to store or not store user credentials.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "browser.retain_editor_history", "value_v5": "true", "dynamic_v5": false, "description_v5": "Configure the Neo4j Browser to store or not store user editor history.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "client.allow_telemetry", "value_v5": "true", "dynamic_v5": false, "description_v5": "Configure client applications such as Browser and Bloom to send Product Analytics data.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.checkpoint", "value_v5": "PERIODIC", "dynamic_v5": false, "description_v5": "Configures the general policy for when checkpoints should occur.Possible values are:* `PERIODIC` (default) -- it runs a checkpoint as per the interval specified by `<>` and `<>`.* `VOLUME` -- it runs a checkpoint when the size of the transaction logs reaches the value specified by the `<>` setting. By default, it is set to `250.00MiB`.* `CONTINUOUS` (Enterprise Edition) -- it ignores `<>` and `<>` settings and runs the checkpoint process all the time.* `VOLUMETRIC` -- it makes the best effort to checkpoint often enough so that the database does not get too far behind on deleting old transaction logs as specified in the `<>` setting.", "validValues_v5": "One of [PERIODIC, CONTINUOUS, VOLUME, VOLUMETRIC].", "isExplicitlySet_v5": false }, { "name_v5": "db.checkpoint.interval.time", "value_v5": "15m", "dynamic_v5": false, "description_v5": "Configures the time interval between checkpoints. The database does not checkpoint more often the specified interval (unless checkpointing is triggered by a different event), but might checkpoint less often if performing a checkpoint takes longer time than the configured interval. A checkpoint is a point in the transaction logs from which recovery starts. Longer checkpoint intervals typically mean that recovery takes longer to complete in case of a crash. On the other hand, a longer checkpoint interval can also reduce the I/O load that the database places on the system, as each checkpoint implies a flushing and forcing of all the store files.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "db.checkpoint.interval.tx", "value_v5": "100000", "dynamic_v5": false, "description_v5": "Configures the transaction interval between checkpoints. The database does not checkpoint more often the specified interval (unless checkpointing is triggered by a different event), but might checkpoint less often if performing a checkpoint takes longer time than the configured interval. A checkpoint is a point in the transaction logs from which recovery starts. Longer checkpoint intervals typically mean that recovery takes longer to complete in case of a crash. On the other hand, a longer checkpoint interval can also reduce the I/O load that the database places on the system, as each checkpoint implies a flushing and forcing of all the store files. The default is `100000` for a checkpoint every 100000 transactions.", "validValues_v5": "An integer that is minimum `1`.", "isExplicitlySet_v5": false }, { "name_v5": "db.checkpoint.interval.volume", "value_v5": "250.00MiB", "dynamic_v5": false, "description_v5": "Configures the volume of transaction logs between checkpoints. The database does not checkpoint more often the specified interval (unless checkpointing is triggered by a different event), but might checkpoint less often if performing a checkpoint takes longer time than the configured interval. A checkpoint is a point in the transaction logs from which recovery starts. Longer checkpoint intervals typically mean that recovery takes longer to complete in case of a crash. On the other hand, a longer checkpoint interval can also reduce the I/O load that the database places on the system, as each checkpoint implies a flushing and forcing of all the store files.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`) that is minimum `1.00KiB`.", "isExplicitlySet_v5": false }, { "name_v5": "db.checkpoint.iops.limit", "value_v5": "600", "dynamic_v5": true, "description_v5": "Limit the number of IOs the background checkpoint process consumes per second. This setting is advisory. It is ignored in Neo4j Community Edition and is followed to best effort in Enterprise Edition. An IO is, in this case, an 8 KiB (mostly sequential) write. Limiting the write IO in this way leaves more bandwidth in the IO subsystem to service random-read IOs, which is important for the response time of queries when the database cannot fit entirely in memory. The only drawback of this setting is that longer checkpoint times may lead to slightly longer recovery times in case of a database or system crash. A lower number means lower IO pressure and, consequently, longer checkpoint times. Set this to -1 to disable the IOPS limit and remove the limitation entirely. This lets the checkpointer flush data as fast as the hardware goes. Removing or commenting out the setting sets the default value of 600.", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.catchup.pull_interval", "value_v5": "1s", "dynamic_v5": false, "description_v5": "The interval at which a secondary server fetches updates for a specific database from the primary server for that database.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.raft.apply.buffer.max_bytes", "value_v5": "1.00GiB", "dynamic_v5": false, "description_v5": "The maximum number of bytes in the apply buffer. This parameter limits the amount of memory that can be consumed by the apply buffer. If the bytes limit is reached, buffer size will be limited even if max_entries is not exceeded.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`).", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.raft.apply.buffer.max_entries", "value_v5": "1024", "dynamic_v5": false, "description_v5": "The maximum number of entries in the raft log entry prefetch buffer.", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.raft.in_queue.batch.max_bytes", "value_v5": "8.00MiB", "dynamic_v5": false, "description_v5": "Largest batch processed by RAFT in bytes", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`).", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.raft.in_queue.max_bytes", "value_v5": "2.00GiB", "dynamic_v5": false, "description_v5": "Maximum number of bytes in the RAFT in-queue.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`).", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.raft.leader_transfer.priority_group", "value_v5": "", "dynamic_v5": false, "description_v5": "The name of a server_group whose members should be prioritized as leaders. This does not guarantee that the leader will always be a member of this group, but the cluster will attempt to transfer the leadership to such a member when possible. If a database is specified using db.cluster.raft.leader_transfer.priority_group., the specified priority group will apply only to that database. If no database is specified, that group will be the default and apply to all databases with no explicitly set priority group. Using this setting will disable leadership balancing.", "validValues_v5": "A string identifying a server tag.", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.raft.leader_transfer.priority_tag", "value_v5": "", "dynamic_v5": false, "description_v5": "The name of a server tag whose members should be prioritized as leaders. This does not guarantee that the leader will always be a member of this tag, but the cluster will attempt to transfer the leadership to such a member when possible. If a database is specified using db.cluster.raft.leader_transfer.priority_tag., the specified priority tag will apply only to that database. If no database is specified, that tag will be the default and apply to all databases with no explicitly set priority tag. Using this setting will disable leadership balancing.", "validValues_v5": "A string identifying a server tag.", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.raft.log.prune_strategy", "value_v5": "1g size", "dynamic_v5": false, "description_v5": "RAFT log pruning strategy that determines which logs are to be pruned. Neo4j only prunes log entries up to the last applied index, which guarantees that logs are only marked for pruning once the transactions within are safely copied over to the local transaction logs and safely committed by a majority of cluster members. Possible values are a byte size or a number of transactions (e.g., 200K txs).", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.raft.log_shipping.buffer.max_bytes", "value_v5": "1.00GiB", "dynamic_v5": false, "description_v5": "The maximum number of bytes in the in-flight cache. This parameter limits the amount of memory that can be consumed by the cache. If the bytes limit is reached, cache size will be limited even if max_entries is not exceeded.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`).", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.raft.log_shipping.buffer.max_entries", "value_v5": "1024", "dynamic_v5": false, "description_v5": "The maximum number of entries in the in-flight cache. Increasing size requires more memory but might improve performance in high-load situations.", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "db.cluster.raft.so_keepalive_enabled", "value_v5": "false", "dynamic_v5": false, "description_v5": "Set the keepalive socket option (SO_KEEPALIVE) for all Raft TCP channels.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.filewatcher.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Allows the enabling or disabling of the file watcher service. This is an auxiliary service but should be left enabled in almost all cases.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.format", "value_v5": "block", "dynamic_v5": true, "description_v5": "Database format. This is the format that will be used for new databases. Valid values are `standard`, `aligned`, `high_limit` or `block`. `block` is the default format for Enterprise Edition. The `aligned` format is essentially the `standard` format with some minimal padding at the end of pages such that a single record will never cross a page boundary. The `high_limit` and `block` formats are available for Enterprise Edition only. Either `high_limit` or `block` is required if you have a graph that is larger than 34 billion nodes, 34 billion relationships, or 68 billion properties.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "db.import.csv.buffer_size", "value_v5": "2097152", "dynamic_v5": false, "description_v5": "The size of the internal buffer in bytes used by `LOAD CSV`. If the csv file contains huge fields this value may have to be increased.", "validValues_v5": "A long that is minimum `1`.", "isExplicitlySet_v5": false }, { "name_v5": "db.import.csv.legacy_quote_escaping", "value_v5": "true", "dynamic_v5": false, "description_v5": "Selects whether to conform to the standard https://tools.ietf.org/html/rfc4180 for interpreting escaped quotation characters in CSV files loaded using `LOAD CSV`. Setting this to `false` will use the standard, interpreting repeated quotes '\"\"' as a single in-lined quote, while `true` will use the legacy convention originally supported in Neo4j 3.0 and 3.1, allowing a backslash to include quotes in-lined in fields.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.index.fulltext.default_analyzer", "value_v5": "simple", "dynamic_v5": false, "description_v5": "The name of the analyzer that the full-text indexes should use by default.", "validValues_v5": "A string.", "isExplicitlySet_v5": true }, { "name_v5": "db.index.fulltext.eventually_consistent", "value_v5": "false", "dynamic_v5": false, "description_v5": "Whether or not full-text indexes should be eventually consistent by default or not.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.index.fulltext.eventually_consistent_apply_parallelism", "value_v5": "1", "dynamic_v5": false, "description_v5": "The number of threads processing queued index updates for eventually consistent full-text indexes.", "validValues_v5": "An integer that is minimum `1`.", "isExplicitlySet_v5": false }, { "name_v5": "db.index.fulltext.eventually_consistent_index_update_queue_max_length", "value_v5": "10000", "dynamic_v5": false, "description_v5": "The eventually_consistent mode of the full-text indexes works by queueing up index updates to be applied later in a background thread. This newBuilder sets an upper bound on how many index updates are allowed to be in this queue at any one point in time. When it is reached, the commit process will slow down and wait for the index update applier thread to make some more room in the queue.", "validValues_v5": "An integer that is in the range `1` to `50000000`.", "isExplicitlySet_v5": false }, { "name_v5": "db.index.fulltext.eventually_consistent_refresh_interval", "value_v5": "0s", "dynamic_v5": false, "description_v5": "How often an eventually consistent full-text index is refreshed (changes are guaranteed to be visible). If set to `0`, refresh is done by the threads applying eventually consistent full-text index updates.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "db.index.fulltext.eventually_consistent_refresh_parallelism", "value_v5": "1", "dynamic_v5": false, "description_v5": "The number of threads that can do full-text index refresh in parallel,i.e. the number of eventually consistent full-text indexes that can be refreshed in parallel.", "validValues_v5": "An integer that is minimum `1`.", "isExplicitlySet_v5": false }, { "name_v5": "db.index_sampling.background_enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable or disable background index sampling", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.index_sampling.sample_size_limit", "value_v5": "8388608", "dynamic_v5": false, "description_v5": "Index sampling chunk size limit", "validValues_v5": "An integer that is in the range `1048576` to `2147483647`.", "isExplicitlySet_v5": false }, { "name_v5": "db.index_sampling.update_percentage", "value_v5": "5", "dynamic_v5": false, "description_v5": "Percentage of index updates of total index size required before sampling of a given index is triggered", "validValues_v5": "An integer that is minimum `0`.", "isExplicitlySet_v5": false }, { "name_v5": "db.lock.acquisition.timeout", "value_v5": "0s", "dynamic_v5": true, "description_v5": "The maximum time interval within which lock should be acquired. Zero (default) means timeout is disabled.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "db.logs.query.annotation_data_as_json_enabled", "value_v5": "false", "dynamic_v5": true, "description_v5": "Log the annotation data as a JSON strings instead of a cypher map.This only have effect when the query log is in JSON format.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.logs.query.annotation_data_format", "value_v5": "CYPHER", "dynamic_v5": true, "description_v5": "The format to use for the JSON annotation data.`CYPHER`:: Formatted as a Cypher map. E.g. `{foo: 'bar', baz: {k: 1}}`.`JSON`:: Formatted as a JSON map. E.g. `{\"foo\": \"bar\", \"baz\": {\"k\": 1}}`.`FLAT_JSON`:: Formatted as a flattened JSON map. E.g. `{\"foo\": \"bar\", \"baz.k\": 1}`.This only have effect when the query log is in JSON format.", "validValues_v5": "One of [CYPHER, JSON, FLAT_JSON].", "isExplicitlySet_v5": false }, { "name_v5": "db.logs.query.early_raw_logging_enabled", "value_v5": "false", "dynamic_v5": true, "description_v5": "Log query text and parameters without obfuscating passwords. This allows queries to be logged earlier before parsing starts.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.logs.query.enabled", "value_v5": "OFF", "dynamic_v5": true, "description_v5": "Log executed queries. Valid values are `OFF`, `INFO`, or `VERBOSE`.`OFF`:: no logging.`INFO`:: log queries at the end of execution, that take longer than the configured threshold, `db.logs.query.threshold`.`VERBOSE`:: log queries at the start and end of execution, regardless of `db.logs.query.threshold`.Log entries are written to the query log.This feature is available in the Neo4j Enterprise Edition.", "validValues_v5": "One of [OFF, INFO, VERBOSE].", "isExplicitlySet_v5": true }, { "name_v5": "db.logs.query.max_parameter_length", "value_v5": "2147483647", "dynamic_v5": true, "description_v5": "Sets a maximum character length use for each parameter in the log. This only takes effect if `db.logs.query.parameter_logging_enabled = true`.", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "db.logs.query.obfuscate_literals", "value_v5": "false", "dynamic_v5": true, "description_v5": "Obfuscates all literals of the query before writing to the log. Note that node labels, relationship types and map property keys are still shown. Changing the setting will not affect queries that are cached. So, if you want the switch to have immediate effect, you must also call `CALL db.clearQueryCaches()`.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.logs.query.parameter_logging_enabled", "value_v5": "true", "dynamic_v5": true, "description_v5": "Log parameters for the executed queries being logged.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.logs.query.plan_description_enabled", "value_v5": "false", "dynamic_v5": true, "description_v5": "Log query plan description table, useful for debugging purposes.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.logs.query.threshold", "value_v5": "0s", "dynamic_v5": true, "description_v5": "If the execution of query takes more time than this threshold, the query is logged once completed - provided query logging is set to INFO. Defaults to 0 seconds, that is all queries are logged.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "db.logs.query.transaction.enabled", "value_v5": "OFF", "dynamic_v5": true, "description_v5": "Log the start and end of a transaction. Valid values are `OFF`, `INFO`, or `VERBOSE`.`OFF`:: no logging.`INFO`:: log start and end of transactions that take longer than the configured threshold, `db.logs.query.transaction.threshold`.`VERBOSE`:: log start and end of all transactions.Log entries are written to the query log.This feature is available in the Neo4j Enterprise Edition.", "validValues_v5": "One of [OFF, INFO, VERBOSE].", "isExplicitlySet_v5": false }, { "name_v5": "db.logs.query.transaction.threshold", "value_v5": "0s", "dynamic_v5": true, "description_v5": "If the transaction is open for more time than this threshold, the transaction is logged once completed - provided transaction logging (db.logs.query.transaction.enabled) is set to `INFO`. Defaults to 0 seconds (all transactions are logged).", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "db.memory.pagecache.warmup.enable", "value_v5": "true", "dynamic_v5": false, "description_v5": "Page cache can be configured to perform usage sampling of loaded pages that can be used to construct active load profile. According to that profile pages can be reloaded on the restart, replication, etc. This setting allows disabling that behavior.This feature is available in Neo4j Enterprise Edition.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.memory.pagecache.warmup.preload", "value_v5": "false", "dynamic_v5": false, "description_v5": "Page cache warmup can be configured to prefetch files, preferably when cache size is bigger than store size. Files to be prefetched can be filtered by 'dbms.memory.pagecache.warmup.preload.allowlist'. Enabling this disables warmup by profile ", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.memory.pagecache.warmup.preload.allowlist", "value_v5": ".*", "dynamic_v5": false, "description_v5": "Page cache warmup prefetch file allowlist regex. By default matches all files.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "db.memory.pagecache.warmup.profile.interval", "value_v5": "1m", "dynamic_v5": false, "description_v5": "The profiling frequency for the page cache. Accurate profiles allow the page cache to do active warmup after a restart, reducing the mean time to performance.This feature is available in Neo4j Enterprise Edition.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "db.memory.transaction.max", "value_v5": "0B", "dynamic_v5": true, "description_v5": "Limit the amount of memory that a single transaction can consume, in bytes (or kibibytes with the 'k' suffix, mebibytes with 'm' and gibibytes with 'g'). Zero means 'largest possible value'.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`) that is minimum `1.00MiB` or is `0B`.", "isExplicitlySet_v5": false }, { "name_v5": "db.memory.transaction.total.max", "value_v5": "0B", "dynamic_v5": true, "description_v5": "Limit the amount of memory that all transactions in one database can consume, in bytes (or kibibytes with the 'k' suffix, mebibytes with 'm' and gibibytes with 'g'). Zero means 'unlimited'.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`) that is minimum `10.00MiB` or is `0B`.", "isExplicitlySet_v5": false }, { "name_v5": "db.recovery.fail_on_missing_files", "value_v5": "true", "dynamic_v5": false, "description_v5": "If `true`, Neo4j will abort recovery if transaction log files are missing. Setting this to `false` will allow Neo4j to create new empty missing files for the already existing database, but the integrity of the database might be compromised.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.relationship_grouping_threshold", "value_v5": "50", "dynamic_v5": false, "description_v5": "Relationship count threshold for considering a node to be dense.", "validValues_v5": "An integer that is minimum `1`.", "isExplicitlySet_v5": false }, { "name_v5": "db.shutdown_transaction_end_timeout", "value_v5": "10s", "dynamic_v5": false, "description_v5": "The maximum amount of time to wait for running transactions to complete before allowing initiated database shutdown to continue", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "db.store.files.preallocate", "value_v5": "true", "dynamic_v5": false, "description_v5": "Specify if Neo4j should try to preallocate store files as they grow.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.temporal.timezone", "value_v5": "Z", "dynamic_v5": false, "description_v5": "Database timezone for temporal functions. All Time and DateTime values that are created without an explicit timezone will use this configured default timezone.", "validValues_v5": "A string describing a timezone, either described by offset (e.g. `+02:00`) or by name (e.g. `Europe/Stockholm`).", "isExplicitlySet_v5": false }, { "name_v5": "db.track_query_cpu_time", "value_v5": "false", "dynamic_v5": true, "description_v5": "Enables or disables tracking of how much time a query spends actively executing on the CPU. Calling `SHOW TRANSACTIONS` will display the time.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.transaction.bookmark_ready_timeout", "value_v5": "1m30s", "dynamic_v5": true, "description_v5": "The maximum amount of time to wait for the database state represented by the bookmark.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `1s`.", "isExplicitlySet_v5": true }, { "name_v5": "db.transaction.concurrent.maximum", "value_v5": "1000", "dynamic_v5": true, "description_v5": "The maximum number of concurrently running transactions. If set to 0, limit is disabled.", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "db.transaction.monitor.check.interval", "value_v5": "2s", "dynamic_v5": false, "description_v5": "Configures the time interval between transaction monitor checks. Determines how often monitor thread will check transaction for timeout.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "db.transaction.sampling.percentage", "value_v5": "5", "dynamic_v5": true, "description_v5": "Transaction sampling percentage.", "validValues_v5": "An integer that is in the range `1` to `100`.", "isExplicitlySet_v5": false }, { "name_v5": "db.transaction.timeout", "value_v5": "5m", "dynamic_v5": true, "description_v5": "The maximum time interval of a transaction within which it should be completed.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": true }, { "name_v5": "db.transaction.tracing.level", "value_v5": "DISABLED", "dynamic_v5": true, "description_v5": "Transaction creation tracing level.", "validValues_v5": "One of [DISABLED, SAMPLE, ALL].", "isExplicitlySet_v5": false }, { "name_v5": "db.tx_log.buffer.size", "value_v5": "1048576", "dynamic_v5": false, "description_v5": "On serialization of transaction logs, they will be temporary stored in the byte buffer that will be flushed at the end of the transaction or at any moment when buffer will be full.By default, the size of byte buffer is based on the number of available CPUs, with a minimum of 512KB. Every additional 4 CPUs add another 512KB into the buffer size. The maximal buffer size in this default scheme is 4MB taking into account that there can be one transaction log writer per database in a multi-database env.For example, runtimes with 4 CPUs will have a buffer size of 1MB; runtimes with 8 CPUs will have buffer size of 1.5MB; runtimes with 12 CPUs will have buffer size of 2MB.", "validValues_v5": "A long that is minimum `131072`.", "isExplicitlySet_v5": false }, { "name_v5": "db.tx_log.preallocate", "value_v5": "true", "dynamic_v5": true, "description_v5": "Specify if Neo4j should try to preallocate logical log file in advance.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "db.tx_log.rotation.retention_policy", "value_v5": "7 days", "dynamic_v5": true, "description_v5": "Tell Neo4j how long logical transaction logs should be kept to backup the database.For example, \"10 days\" will prune logical logs that only contain transactions older than 10 days.Alternatively, \"100k txs\" will keep the 100k latest transactions from each database and prune any older transactions.", "validValues_v5": "A string that matches the pattern `^(true|keep_all|false|keep_none|(d+[KkMmGg]?( (files|size|txs|entries|hours( d+[KkMmGg]?)?|days( d+[KkMmGg]?)?))))$` (Must be `true` or `keep_all`, `false` or `keep_none`, or of format ` `. Valid units are `K`, `M` and `G`. Valid types are `files`, `size`, `txs`, `entries`, `hours` and `days`. Valid optional space restriction is a logical log space restriction like `100M`. For example, `100M size` will limit logical log space on disk to 100MiB per database, and `200K txs` will limit the number of transactions kept to 200 000 per database.).", "isExplicitlySet_v5": true }, { "name_v5": "db.tx_log.rotation.size", "value_v5": "256.00MiB", "dynamic_v5": true, "description_v5": "Specifies at which file size the logical log will auto-rotate. Minimum accepted value is 128 KiB. ", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`) that is minimum `128.00KiB`.", "isExplicitlySet_v5": false }, { "name_v5": "db.tx_state.memory_allocation", "value_v5": "ON_HEAP", "dynamic_v5": false, "description_v5": "Defines whether memory for transaction state should be allocated on- or off-heap. Note that for small transactions you can gain up to 25% write speed by setting it to `ON_HEAP`.", "validValues_v5": "One of [ON_HEAP, OFF_HEAP].", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.catchup.client_inactivity_timeout", "value_v5": "10m", "dynamic_v5": false, "description_v5": "The catchup protocol times out if the given duration elapses with no network activity. Every message received by the client from the server extends the timeout duration.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.discovery.endpoints", "value_v5": null, "dynamic_v5": false, "description_v5": "A comma-separated list of endpoints that a server should contact in order to discover other cluster members. Typically, all cluster members, including the current server, must be specified in this list. The setting configures the endpoints for Discovery service V1.", "validValues_v5": "A comma-separated list where each element is a socket address in the format of `hostname:port`, `hostname`, or `:port`.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.discovery.log_level", "value_v5": "INFO", "dynamic_v5": false, "description_v5": "The level of middleware logging.", "validValues_v5": "One of [DEBUG, INFO, WARN, ERROR, NONE].", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.discovery.resolver_type", "value_v5": "DNS", "dynamic_v5": false, "description_v5": "Configure the resolver type that the discovery service uses for determining who should be part of the cluster.Valid values are `LIST`, `SRV`, `DNS`, and `K8S`:`LIST`:: A static configuration where `dbms.cluster.discovery.endpoints` must contain a list of the addresses of the cluster members.`SRV` and `DNS`:: A dynamic configuration where `dbms.cluster.discovery.endpoints` must point to a DNS entry containing the cluster members' addresses.`K8S`:: At least `dbms.kubernetes.service_port_name` must be set. The addresses of the cluster members are queried dynamically from Kubernetes.", "validValues_v5": "A string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.discovery.type", "value_v5": "LIST", "dynamic_v5": false, "description_v5": "This setting has been replaced by `dbms.cluster.discovery.resolver_type.`", "validValues_v5": "One of [DNS, LIST, SRV, K8S].", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.discovery.v2.endpoints", "value_v5": "dev-neo4j-5-cluster.dev.theorchard.io:6000", "dynamic_v5": false, "description_v5": "A comma-separated list of endpoints which a server should contact in order to discover other cluster members.Typically, all members of the cluster, including the current server, should be specified in this list.The setting configures the endpoints for Discovery service V2.", "validValues_v5": "A comma-separated list where each element is a socket address in the format of `hostname:port`, `hostname`, or `:port`.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.discovery.version", "value_v5": "V2_ONLY", "dynamic_v5": false, "description_v5": "This setting allows you to select which discovery service should be started.Possible values are:`V1_ONLY` -- it runs only discovery service v1.`V1_OVER_V2` -- it runs both Discovery Service V1 and Discovery Service V2, where V1 is the main service and V2 runs in the background.`V2_OVER_V1` -- it runs both Discovery Service V1 and Discovery Service V2, where V2 is the main service and V1 runs in the background.`V2_ONLY` -- it runs only discovery service v2.", "validValues_v5": "One of [V1_ONLY, V1_OVER_V2, V2_OVER_V1, V2_ONLY].", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.minimum_initial_system_primaries_count", "value_v5": "3", "dynamic_v5": false, "description_v5": "Minimum number of machines initially required to form a clustered DBMS. The cluster is considered formed when at least this many members have discovered each other, bound together, and bootstrapped a highly available system database. As a result, at least this many of the cluster's initial machines must have `<>` set to `PRIMARY`.NOTE: If `dbms.cluster.discovery.resolver_type` is set to `LIST` and `dbms.cluster.discovery.endpoints` is empty, then the user is assumed to be deploying a standalone DBMS, and the value of this setting is ignored.", "validValues_v5": "An integer that is minimum `1`.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.network.connect_timeout", "value_v5": "30s", "dynamic_v5": true, "description_v5": "The maximum amount of time to wait for a network connection to be established.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.network.handshake_timeout", "value_v5": "20s", "dynamic_v5": false, "description_v5": "Time out for protocol negotiation handshake.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.network.max_chunk_size", "value_v5": "32768", "dynamic_v5": false, "description_v5": "Maximum chunk size allowable across a network by clustering machinery.", "validValues_v5": "An integer that is in the range `4096` to `10485760`.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.network.supported_compression_algos", "value_v5": "", "dynamic_v5": false, "description_v5": "Network compression algorithms that this instance allows in negotiation as a comma-separated list. For incoming connections they are listed in descending order of preference. An empty list implies no compression. For outgoing connections, this merely specifies the allowed set of algorithms and the preference of the remote peer will be used for making the decision. Allowable values: [Gzip, Snappy, Snappy_validating, LZ4, LZ4_high_compression, LZ_validating, LZ4_high_compression_validating]", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.raft.binding_timeout", "value_v5": "1d", "dynamic_v5": false, "description_v5": "The time allowed for a database on a Neo4j server to either join a cluster or form a new cluster with at least the quorum of the members available. The members are provided by `<>` for the system database and by the topology graph for standard databases.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.raft.client.max_channels", "value_v5": "8", "dynamic_v5": false, "description_v5": "The maximum number of TCP channels between two nodes to operate the raft protocol. Each database gets allocated one channel, but a single channel can be used by more than one database.", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.raft.election_failure_detection_window", "value_v5": "3s-6s", "dynamic_v5": false, "description_v5": "The rate at which leader elections happen. Note that due to election conflicts, it might take several attempts to find a leader. The window should be significantly larger than typical communication delays to make conflicts unlikely.", "validValues_v5": "A duration-range (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.raft.leader_failure_detection_window", "value_v5": "20s-23s", "dynamic_v5": false, "description_v5": "The time window within which the loss of the leader is detected and the first re-election attempt is held. The window should be significantly larger than typical communication delays to make conflicts unlikely.", "validValues_v5": "A duration-range (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.raft.leader_transfer.balancing_strategy", "value_v5": "EQUAL_BALANCING", "dynamic_v5": false, "description_v5": "Which strategy to use when transferring database leaderships around a cluster. Note that if a `leadership_priority_group` is specified for a given database, the value of this setting will be ignored for that database. The following values are available: * `equal_balancing` automatically ensures that each primary server holds the leader role for an equal number of databases. * `no_balancing` prevents any automatic balancing of the leader role. ", "validValues_v5": "One of [NO_BALANCING, EQUAL_BALANCING].", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.raft.log.pruning_frequency", "value_v5": "10m", "dynamic_v5": false, "description_v5": "RAFT log pruning frequency.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.raft.log.reader_pool_size", "value_v5": "8", "dynamic_v5": false, "description_v5": "RAFT log reader pool size.", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.raft.log.rotation_size", "value_v5": "250.00MiB", "dynamic_v5": false, "description_v5": "RAFT log rotation size. The log will be rotated when it reaches this size.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`) that is minimum `1.00KiB`.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.raft.membership.join_max_lag", "value_v5": "10s", "dynamic_v5": false, "description_v5": "Maximum amount of lag accepted for a new follower to join the Raft group.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cluster.raft.membership.join_timeout", "value_v5": "10m", "dynamic_v5": false, "description_v5": "Timeout for a new member to catch up.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cluster.store_copy.max_retry_time_per_request", "value_v5": "1h", "dynamic_v5": false, "description_v5": "Maximum retry time per request during store copy. Regular store files and indexes are downloaded in separate requests during store copy. This configures the maximum time failed requests are allowed to resend.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": true }, { "name_v5": "dbms.cypher.forbid_exhaustive_shortestpath", "value_v5": "false", "dynamic_v5": false, "description_v5": "This setting is associated with performance optimization. Set this to `true` in situations where it is preferable to have any queries using the 'shortestPath' function terminate as soon as possible with no answer, rather than potentially running for a long time attempting to find an answer (even if there is no path to be found). For most queries, the 'shortestPath' algorithm will return the correct answer very quickly. However there are some cases where it is possible that the fast bidirectional breadth-first search algorithm will find no results even if they exist. This can happen when the predicates in the `WHERE` clause applied to 'shortestPath' cannot be applied to each step of the traversal, and can only be applied to the entire path. When the query planner detects these special cases, it will plan to perform an exhaustive depth-first search if the fast algorithm finds no paths. However, the exhaustive search may be orders of magnitude slower than the fast algorithm. If it is critical that queries terminate as soon as possible, it is recommended that this option be set to `true`, which means that Neo4j will never consider using the exhaustive search for shortestPath queries. However, please note that if no paths are found, an error will be thrown at run time, which will need to be handled by the application.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cypher.forbid_shortestpath_common_nodes", "value_v5": "true", "dynamic_v5": false, "description_v5": "This setting is associated with performance optimization. The shortest path algorithm does not work when the start and end nodes are the same. With this setting set to `false` no path will be returned when that happens. The default value of `true` will instead throw an exception. This can happen if you perform a shortestPath search after a cartesian product that might have the same start and end nodes for some of the rows passed to shortestPath. If it is preferable to not experience this exception, and acceptable for results to be missing for those rows, then set this to `false`. If you cannot accept missing results, and really want the shortestPath between two common nodes, then re-write the query using a standard Cypher variable length pattern expression followed by ordering by path length and limiting to one result.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cypher.hints_error", "value_v5": "false", "dynamic_v5": false, "description_v5": "Set this to specify the behavior when Cypher planner or runtime hints cannot be fulfilled. If true, then non-conformance will result in an error, otherwise only a warning is generated.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cypher.infer_schema_parts", "value_v5": "OFF", "dynamic_v5": false, "description_v5": "Allow label inference during cardinality estimation. If the planner can logically deduce that a node has a label not explicitly expressed in the query, the planner will use this information during cardinality estimation.This setting controls to what extent the planner should do that:* `OFF`: No predicates are inferred.* `MOST_SELECTIVE_LABEL`: Relationship types are used to infer labels on the relationships' end nodes. The planner only infers at most one label per node. If more than one label can be inferred for a given node, the planner keeps the most selective one, the one corresponding to the smallest number of nodes in the graph.", "validValues_v5": "One of [MOST_SELECTIVE_LABEL, OFF].", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cypher.lenient_create_relationship", "value_v5": "false", "dynamic_v5": false, "description_v5": "Set this to change the behavior for Cypher create relationship when the start or end node is missing.By default this fails the query and stops execution, but by setting this flag the create operation is simply not performed and execution continues.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cypher.min_replan_interval", "value_v5": "10s", "dynamic_v5": false, "description_v5": "The minimum time between possible cypher query replanning events. After this time, the graph statistics will be evaluated, and if they have changed by more than the value set by dbms.cypher.statistics_divergence_threshold, the query will be replanned. If the statistics have not changed sufficiently, the same interval will need to pass before the statistics will be evaluated again. Each time they are evaluated, the divergence threshold will be reduced slightly until it reaches 10% after 7h, so that even moderately changing databases will see query replanning after a sufficiently long time interval.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cypher.planner", "value_v5": "DEFAULT", "dynamic_v5": false, "description_v5": "Set this to specify the default planner for the default language version.", "validValues_v5": "One of [DEFAULT, COST].", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cypher.render_plan_description", "value_v5": "true", "dynamic_v5": true, "description_v5": "If set to `true` a textual representation of the plan description will be rendered on the server for all queries running with `EXPLAIN` or `PROFILE`. This allows clients such as the neo4j browser and Cypher shell to show a more detailed plan description.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.cypher.statistics_divergence_threshold", "value_v5": "0.75", "dynamic_v5": false, "description_v5": "The threshold for statistics above which a plan is considered stale.If any of the underlying statistics used to create the plan have changed more than this value, the plan will be considered stale and will be replanned. Change is calculated as `abs(a-b)/max(a,b)`.This means that a value of `0.75` requires the database to quadruple in size before query replanning. A value of `0` means that the query will be replanned as soon as there is any change in statistics and the replan interval has elapsed.This interval is defined by `dbms.cypher.min_replan_interval` and defaults to 10s. After this interval, the divergence threshold will slowly start to decline, reaching 10% after about 7h. This will ensure that long running databases will still get query replanning on even modest changes, while not replanning frequently unless the changes are very large.", "validValues_v5": "A double that is in the range `0.0` to `1.0`.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.databases.seed_from_uri_providers", "value_v5": "S3SeedProvider", "dynamic_v5": false, "description_v5": "Databases may be created from an existing 'seed' (a database backup or dump) stored at some source URI. Different types of seed source are supported by different implementations of `com.neo4j.dbms.seeding.SeedProvider`. For example, seeds stored at 's3://' and 'https://' URIs are supported by the builtin `S3SeedProvider` and `URLConnectionSeedProvider` respectively. This list specifies enabled seed providers. If a seed source (URI scheme) is supported by multiple providers in the list, the first matching provider will be used. If the list is set to empty, the seed from uri functionality is effectively disabled.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.db.timezone", "value_v5": "UTC", "dynamic_v5": false, "description_v5": "Database timezone. Among other things, this setting influences the monitoring procedures.", "validValues_v5": "One of [UTC, SYSTEM].", "isExplicitlySet_v5": false }, { "name_v5": "dbms.kubernetes.address", "value_v5": "kubernetes.default.svc:443", "dynamic_v5": false, "description_v5": "Address for Kubernetes API", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.kubernetes.ca_crt", "value_v5": "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt", "dynamic_v5": false, "description_v5": "File location of CA certificate for Kubernetes API", "validValues_v5": "A path.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.kubernetes.cluster_domain", "value_v5": "cluster.local", "dynamic_v5": false, "description_v5": "Kubernetes cluster domain", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.kubernetes.discovery.v2.service_port_name", "value_v5": "transaction", "dynamic_v5": false, "description_v5": "Service port name for discovery for Kubernetes API", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.kubernetes.label_selector", "value_v5": null, "dynamic_v5": false, "description_v5": "LabelSelector for Kubernetes API", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.kubernetes.namespace", "value_v5": "/var/run/secrets/kubernetes.io/serviceaccount/namespace", "dynamic_v5": false, "description_v5": "File location of namespace for Kubernetes API", "validValues_v5": "A path.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.kubernetes.service_port_name", "value_v5": null, "dynamic_v5": false, "description_v5": "Service port name for discovery for Kubernetes API", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.kubernetes.token", "value_v5": "/var/run/secrets/kubernetes.io/serviceaccount/token", "dynamic_v5": false, "description_v5": "File location of token for Kubernetes API", "validValues_v5": "A path.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.logs.http.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable HTTP request logging.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.max_databases", "value_v5": "100", "dynamic_v5": false, "description_v5": "The maximum number of databases.", "validValues_v5": "A long that is minimum `2`.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.memory.tracking.enable", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable off heap and on heap memory tracking. Should not be set to `false` for clusters.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.memory.transaction.total.max", "value_v5": "5.60GiB", "dynamic_v5": true, "description_v5": "Limit the amount of memory that all of the running transactions can consume, in bytes (or kibibytes with the 'k' suffix, mebibytes with 'm' and gibibytes with 'g'). Zero means 'unlimited'.Defaults to 70% of the heap size limit.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`) that is minimum `10.00MiB` or is `0B`.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.netty.ssl.provider", "value_v5": "OPENSSL", "dynamic_v5": false, "description_v5": "Netty SSL provider", "validValues_v5": "One of [JDK, OPENSSL, OPENSSL_REFCNT].", "isExplicitlySet_v5": true }, { "name_v5": "dbms.routing.client_side.enforce_for_domains", "value_v5": "", "dynamic_v5": true, "description_v5": "Always use client-side routing (regardless of the default router) for `neo4j://` protocol connections to these domains. A comma-separated list of domains. Wildcards (`*`) are supported.", "validValues_v5": "A comma-separated set where each element is a string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing.default_router", "value_v5": "CLIENT", "dynamic_v5": false, "description_v5": "Routing strategy for `neo4j://` protocol connections.Default is `CLIENT`, using client-side routing, with server-side routing as a fallback (if enabled).When set to `SERVER`, client-side routing is short-circuited, and requests rely on server-side routing (which must be enabled for proper operation, i.e. `dbms.routing.enabled=true`).Can be overridden by `<>`.", "validValues_v5": "One of [SERVER, CLIENT].", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing.driver.connection.connect_timeout", "value_v5": "5s", "dynamic_v5": false, "description_v5": "Socket connection timeout.A timeout of zero is treated as an infinite timeout and will be bound by the timeout configured on theoperating system level.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing.driver.connection.max_lifetime", "value_v5": "1h", "dynamic_v5": false, "description_v5": "Pooled connections older than this threshold will be closed and removed from the pool.Setting this option to a low value will cause a high connection churn and might result in a performance hit.It is recommended to set maximum lifetime to a slightly smaller value than the one configured in networkequipment (load balancer, proxy, firewall, etc. can also limit maximum connection lifetime).Zero and negative values result in lifetime not being checked.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing.driver.connection.pool.acquisition_timeout", "value_v5": "1m", "dynamic_v5": false, "description_v5": "Maximum amount of time spent attempting to acquire a connection from the connection pool.This timeout only kicks in when all existing connections are being used, and no new connections can be created because the maximum connection pool size has been reached.An error is raised when no connection can be acquired within the configured time.Negative values are allowed, which results in an unlimited acquisition timeout. A value of 0 is allowed, resulting in no timeout and immediate failure when the connection is unavailable.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing.driver.connection.pool.idle_test", "value_v5": null, "dynamic_v5": false, "description_v5": "Pooled connections that have been idle in the pool for longer than this timeout will be tested to ensure they are still alive before being used again.If the value of this option is too low, acquiring a connection will require an additional network call, which will cause a performance hit.If the value of this option is too high, live connections might no longer be used, leading to errors.Hence, this parameter balances the likelihood of experiencing connection problems and performance.Usually, this parameter should not need tuning.Value `0` means connections will always be tested for validity.No connection liveliness check is done by default.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing.driver.connection.pool.max_size", "value_v5": "-1", "dynamic_v5": false, "description_v5": "Maximum total number of connections to be managed by a connection pool.The limit is enforced for a combination of a host and user. Negative values are allowed and result in unlimited pool. Value of `0`is not allowed.Defaults to `-1` (unlimited).", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing.driver.logging.level", "value_v5": "INFO", "dynamic_v5": false, "description_v5": "Sets the level for the driver's internal logging.", "validValues_v5": "One of [DEBUG, INFO, WARN, ERROR, NONE].", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable server-side routing in clusters using an additional bolt connector.When configured, this allows requests to be forwarded from one cluster member to another, if the requests cannot be satisfied by the first member (e.g. write requests received by a non-leader).", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.routing.load_balancing.plugin", "value_v5": "server_policies", "dynamic_v5": false, "description_v5": "The load balancing plugin to use.", "validValues_v5": "A string that specified load balancer plugin exist..", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing.load_balancing.shuffle_enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Vary the order of the entries in routing tables each time one is produced. This means that different clients should select a range of servers as their first contact, reducing the chance of all clients contacting the same server if alternatives are available. This makes the load across the servers more even.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing.reads_on_primaries_enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Configure if the `dbms.routing.getRoutingTable()` procedure should include non-writer primaries as read endpoints or return only secondaries. +NOTE: If there are no secondaries for the given database, primaries are returned as read endpoints, regardless the value. Defaults to `true` so that non-writer primaries are available for read-only queries in a typical heterogeneous setup.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.routing.reads_on_writers_enabled", "value_v5": "false", "dynamic_v5": true, "description_v5": "Configure if the `dbms.routing.getRoutingTable()` procedure should include the writer as read endpoint or return only non-writers (non-writer primaries and secondaries).NOTE: Writer is returned as read endpoint if no other member is present.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.routing_ttl", "value_v5": "1m", "dynamic_v5": false, "description_v5": "How long callers should cache the response of the routing procedure `dbms.routing.getRoutingTable()`.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `1s`.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.security.allow_csv_import_from_file_urls", "value_v5": "true", "dynamic_v5": false, "description_v5": "Determines if Cypher will allow using file URLs when loading data using `LOAD CSV`. Setting this value to `false` will cause Neo4j to fail `LOAD CSV` clauses that load data from the file system.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.security.auth_cache_max_capacity", "value_v5": "10000", "dynamic_v5": false, "description_v5": "The maximum capacity for authentication and authorization caches (respectively).", "validValues_v5": "An integer.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.security.auth_cache_ttl", "value_v5": "10m", "dynamic_v5": false, "description_v5": "The time to live (TTL) for cached authentication and authorization info when using external auth providers (OIDC, LDAP or plugin). Setting the TTL to 0 will disable auth caching. Disabling caching while using the LDAP auth provider requires the use of an LDAP system account for resolving authorization information.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.auth_cache_use_ttl", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable time-based eviction of the authentication and authorization info cache for external auth providers (OIDC, LDAP or plugin). Disabling this setting will make the cache live forever and only be evicted when `dbms.security.auth_cache_max_capacity` is exceeded.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.auth_enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable auth requirement to access Neo4j.Defaults to `true`.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.security.auth_lock_time", "value_v5": "5s", "dynamic_v5": false, "description_v5": "The amount of time user account should be locked after a configured number of unsuccessful authentication attempts. The locked out user will not be able to log in until the lock period expires, even if correct credentials are provided. Setting this configuration option to a low value is not recommended because it might make it easier for an attacker to brute force the password.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `0s`.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.auth_max_failed_attempts", "value_v5": "3", "dynamic_v5": false, "description_v5": "The maximum number of unsuccessful authentication attempts before imposing a user lock for the configured amount of time, as defined by `dbms.security.auth_lock_time`.The locked out user will not be able to log in until the lock period expires, even if correct credentials are provided. Setting this configuration option to values less than 3 is not recommended because it might make it easier for an attacker to brute force the password.", "validValues_v5": "An integer that is minimum `0`.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.auth_minimum_password_length", "value_v5": "8", "dynamic_v5": false, "description_v5": "The minimum number of characters required in a password.", "validValues_v5": "An integer that is minimum `1`.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.authentication_providers", "value_v5": "native", "dynamic_v5": false, "description_v5": "A list of security authentication providers containing the users and roles. This can be any of the built-in `native` or `ldap` providers, or it can be an externally provided plugin, with a custom name prefixed by `plugin-`, i.e. `plugin-`. They will be queried in the given order when login is attempted.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.security.authorization_providers", "value_v5": "native", "dynamic_v5": false, "description_v5": "A list of security authorization providers containing the users and roles. This can be any of the built-in `native` or `ldap` providers, or it can be an externally provided plugin, with a custom name prefixed by `plugin-`, i.e. `plugin-`. They will be queried in the given order when login is attempted.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.security.cluster_status_auth_enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Require authorization for access to the Causal Clustering status endpoints.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.http_access_control_allow_origin", "value_v5": "*", "dynamic_v5": false, "description_v5": "Value of the Access-Control-Allow-Origin header sent over any HTTP or HTTPS connector. This defaults to '*', which allows broadest compatibility. Note that any URI provided here limits HTTP/HTTPS access to that URI only.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.http_auth_allowlist", "value_v5": "/,/browser.*", "dynamic_v5": false, "description_v5": "Defines an allowlist of http paths where Neo4j authentication is not required.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.http_static_content_security_policy_header", "value_v5": "default-src 'self'; script-src 'self' cdn.segment.com canny.io; img-src 'self' guides.neo4j.com data:; style-src 'self' fonts.googleapis.com 'unsafe-inline'; font-src 'self' fonts.gstatic.com; base-uri 'none'; object-src 'none'; frame-ancestors 'none'; connect-src 'self' api.canny.io api.segment.io ws: wss: http: https:", "dynamic_v5": false, "description_v5": "Defines the Content-Security-Policy header to return to content returned on static endpoints.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.http_strict_transport_security", "value_v5": null, "dynamic_v5": false, "description_v5": "Value of the HTTP Strict-Transport-Security (HSTS) response header. This header tells browsers that a webpage should only be accessed using HTTPS instead of HTTP. It is attached to every HTTPS response. Setting is not set by default so 'Strict-Transport-Security' header is not sent. Value is expected to contain directives like 'max-age', 'includeSubDomains' and 'preload'.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.key.name", "value_v5": "aesKey", "dynamic_v5": true, "description_v5": "Name of the 256 length AES encryption key, which is used for the symmetric encryption.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.keystore.password", "value_v5": null, "dynamic_v5": true, "description_v5": "Password for accessing the keystore holding a 256 length AES encryption key, which is used for the symmetric encryption.", "validValues_v5": "A secure string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.keystore.path", "value_v5": null, "dynamic_v5": true, "description_v5": "Location of the keystore holding a 256 length AES encryption key, which is used for the symmetric encryption of secrets held in system database.", "validValues_v5": "A path.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authentication.attribute", "value_v5": "samaccountname", "dynamic_v5": true, "description_v5": "The attribute to use when looking up users.Using this setting requires `dbms.security.ldap.authentication.search_for_attribute` to be true and thus `dbms.security.ldap.authorization.system_username` and `dbms.security.ldap.authorization.system_password` to be configured.", "validValues_v5": "A string that matches the pattern `[A-Za-z0-9-]*` (has to be a valid LDAP attribute name, only containing letters [A-Za-z], digits [0-9] and hyphens [-].).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authentication.cache_enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Determines if the result of authentication via the LDAP server should be cached or not. Caching is used to limit the number of LDAP requests that have to be made over the network for users that have already been authenticated successfully. A user can be authenticated against an existing cache entry (instead of via an LDAP server) as long as it is alive (see `dbms.security.auth_cache_ttl`).An important consequence of setting this to `true` is that Neo4j then needs to cache a hashed version of the credentials in order to perform credentials matching. This hashing is done using a cryptographic hash function together with a random salt. Preferably a conscious decision should be made if this method is considered acceptable by the security standards of the organization in which this Neo4j instance is deployed.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authentication.mechanism", "value_v5": "simple", "dynamic_v5": false, "description_v5": "LDAP authentication mechanism. This is one of `simple` or a SASL mechanism supported by JNDI, for example `DIGEST-MD5`. `simple` is basic username and password authentication and SASL is used for more advanced mechanisms. See RFC 2251 LDAPv3 documentation for more details.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authentication.search_for_attribute", "value_v5": "false", "dynamic_v5": false, "description_v5": "Perform authentication by searching for an unique attribute of a user.Using this setting requires `dbms.security.ldap.authorization.system_username` and `dbms.security.ldap.authorization.system_password` to be configured.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authentication.user_dn_template", "value_v5": "uid={0},ou=users,dc=example,dc=com", "dynamic_v5": true, "description_v5": "LDAP user DN template. An LDAP object is referenced by its distinguished name (DN), and a user DN is an LDAP fully-qualified unique user identifier. This setting is used to generate an LDAP DN that conforms with the LDAP directory's schema from the user principal that is submitted with the authentication token when logging in. The special token {0} is a placeholder where the user principal will be substituted into the DN string.", "validValues_v5": "A string that Must be a string containing '{0}' to understand where to insert the runtime authentication principal..", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authorization.access_permitted_group", "value_v5": "", "dynamic_v5": true, "description_v5": "The LDAP group to which a user must belong to get any access to the system.Set this to restrict access to a subset of LDAP users belonging to a particular group. If this is not set, any user to successfully authenticate via LDAP will have access to the PUBLIC role and any other roles assigned to them via dbms.security.ldap.authorization.group_to_role_mapping.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authorization.group_membership_attributes", "value_v5": "memberOf", "dynamic_v5": true, "description_v5": "A list of attribute names on a user object that contains groups to be used for mapping to roles when LDAP authorization is enabled. This setting is ignored when `dbms.ldap_authorization_nested_groups_enabled` is `true`.", "validValues_v5": "A comma-separated list where each element is a string, which Can not be empty.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authorization.group_to_role_mapping", "value_v5": "", "dynamic_v5": true, "description_v5": "An authorization mapping from LDAP group names to Neo4j role names. The map should be formatted as a semicolon separated list of key-value pairs, where the key is the LDAP group name and the value is a comma separated list of corresponding role names. For example: group1=role1;group2=role2;group3=role3,role4,role5You could also use whitespaces and quotes around group names to make this mapping more readable, for example: ----dbms.security.ldap.authorization.group_to_role_mapping= \"cn=Neo4j Read Only,cn=users,dc=example,dc=com\" = reader; \"cn=Neo4j Read-Write,cn=users,dc=example,dc=com\" = publisher; \"cn=Neo4j Schema Manager,cn=users,dc=example,dc=com\" = architect; \"cn=Neo4j Administrator,cn=users,dc=example,dc=com\" = admin----", "validValues_v5": "A string that must be a semicolon-separated list of key-value pairs or empty.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authorization.nested_groups_enabled", "value_v5": "false", "dynamic_v5": true, "description_v5": "This setting determines whether multiple LDAP search results will be processed (as is required for the lookup of nested groups). If set to `true` then instead of using attributes on the user object to determine group membership (as specified by `dbms.security.ldap.authorization.group_membership_attributes`), the `user` object will only be used to determine the user's Distinguished Name, which will subsequently be used with `dbms.security.ldap.authorization.user_search_filter` in order to perform a nested group search. The Distinguished Names of the resultant group search results will be used to determine roles.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authorization.nested_groups_search_filter", "value_v5": "(&(objectclass=group)(member:1.2.840.113556.1.4.1941:={0}))", "dynamic_v5": true, "description_v5": "The search template which will be used to find the nested groups which the user is a member of. The filter should contain the placeholder token `{0}` which will be substituted with the user's Distinguished Name (which is found for the specified user principle using `dbms.security.ldap.authorization.user_search_filter`). The default value specifies Active Directory's LDAP_MATCHING_RULE_IN_CHAIN (aka 1.2.840.113556.1.4.1941) implementation which will walk the ancestry of group membership for the specified user.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authorization.system_password", "value_v5": null, "dynamic_v5": false, "description_v5": "An LDAP system account password to use for authorization searches when `dbms.security.ldap.authorization.use_system_account` is `true`.", "validValues_v5": "A secure string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authorization.system_username", "value_v5": null, "dynamic_v5": false, "description_v5": "An LDAP system account username to use for authorization searches when `dbms.security.ldap.authorization.use_system_account` is `true`. Note that the `dbms.security.ldap.authentication.user_dn_template` will not be applied to this username, so you may have to specify a full DN.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authorization.use_system_account", "value_v5": "false", "dynamic_v5": false, "description_v5": "Perform LDAP search for authorization info using a system account instead of the user's own account.If this is set to `false` (default), the search for group membership will be performed directly after authentication using the LDAP context bound with the user's own account. The mapped roles will be cached for the duration of `dbms.security.auth_cache_ttl`, and then expire, requiring re-authentication. To avoid frequently having to re-authenticate sessions you may want to set a relatively long auth cache expiration time together with this option. NOTE: This option will only work if the users are permitted to search for their own group membership attributes in the directory.If this is set to `true`, the search will be performed using a special system account user with read access to all the users in the directory. You need to specify the username and password using the settings `dbms.security.ldap.authorization.system_username` and `dbms.security.ldap.authorization.system_password` with this option. Note that this account only needs read access to the relevant parts of the LDAP directory and does not need to have access rights to Neo4j, or any other systems.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authorization.user_search_base", "value_v5": "ou=users,dc=example,dc=com", "dynamic_v5": true, "description_v5": "The name of the base object or named context to search for user objects when LDAP authorization is enabled. A common case is that this matches the last part of `dbms.security.ldap.authentication.user_dn_template`.", "validValues_v5": "A string that Can not be empty.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.authorization.user_search_filter", "value_v5": "(&(objectClass=*)(uid={0}))", "dynamic_v5": true, "description_v5": "The LDAP search filter to search for a user principal when LDAP authorization is enabled. The filter should contain the placeholder token {0} which will be substituted for the user principal.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.connection_timeout", "value_v5": "30s", "dynamic_v5": false, "description_v5": "The timeout for establishing an LDAP connection. If a connection with the LDAP server cannot be established within the given time the attempt is aborted. A value of 0 means to use the network protocol's (i.e., TCP's) timeout value.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.host", "value_v5": "localhost", "dynamic_v5": false, "description_v5": "URL of LDAP server to use for authentication and authorization. The format of the setting is `://:`, where hostname is the only required field. The supported values for protocol are `ldap` (default) and `ldaps`. The default port for `ldap` is 389 and for `ldaps` 636. For example: `ldaps://ldap.example.com:10389`.You may want to consider using STARTTLS (`dbms.security.ldap.use_starttls`) instead of LDAPS for secure connections, in which case the correct protocol is `ldap`.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.read_timeout", "value_v5": "30s", "dynamic_v5": false, "description_v5": "The timeout for an LDAP read request (i.e. search). If the LDAP server does not respond within the given time the request will be aborted. A value of 0 means wait for a response indefinitely.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.referral", "value_v5": "follow", "dynamic_v5": false, "description_v5": "The LDAP referral behavior when creating a connection. This is one of `follow`, `ignore` or `throw`.* `follow` automatically follows any referrals* `ignore` ignores any referrals* `throw` throws an exception, which will lead to authentication failure", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.ldap.use_starttls", "value_v5": "false", "dynamic_v5": false, "description_v5": "Use secure communication with the LDAP server using opportunistic TLS. First an initial insecure connection will be made with the LDAP server, and a STARTTLS command will be issued to negotiate an upgrade of the connection to TLS before initiating authentication.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.log_successful_authentication", "value_v5": "true", "dynamic_v5": false, "description_v5": "Set to log successful authentication events to the security log. If this is set to `false` only failed authentication events will be logged, which could be useful if you find that the successful events spam the logs too much, and you do not require full auditing capability.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.security.logs.ldap.groups_at_debug_level_enabled", "value_v5": "false", "dynamic_v5": false, "description_v5": "When set to `true`, will log the groups retrieved from the ldap server. This will only take effect when the security log level is set to `DEBUG`.WARNING: It is strongly advised that this is set to `false` when running in a production environment in order to prevent logging of sensitive information.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.logs.oidc.jwt_claims_at_debug_level_enabled", "value_v5": "false", "dynamic_v5": false, "description_v5": "When set to `true`, will log the claims from the JWT. This will only take effect when the security log level is set to `DEBUG`.WARNING: It is strongly advised that this is set to `false` when running in a production environment in order to preventlogging of sensitive information. Please also note that the contents of the JWT claims set can change over time because they are dependent entirely upon the ID provider.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.security.procedures.allowlist", "value_v5": "apoc.*,streams.*,cdc.*", "dynamic_v5": false, "description_v5": "A list of procedures (comma separated) that are to be loaded. The list may contain both fully-qualified procedure names, and partial names with the wildcard '*'. If this setting is left empty no procedures will be loaded.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.security.procedures.unrestricted", "value_v5": "apoc.*,streams.*,cdc.*", "dynamic_v5": false, "description_v5": "A list of procedures and user defined functions (comma separated) that are allowed full access to the database. The list may contain both fully-qualified procedure names, and partial names with the wildcard '*'. Note that this enables these procedures to bypass security. Use with caution.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.security.require_local_user", "value_v5": "false", "dynamic_v5": false, "description_v5": "This controls if a local user has to be created for external authentication. If set to the default (`false`), no user has to be created to authenticate with an external authentication provider.If set to `true`, a user representing the external user must be created before they can authenticate successfully.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.ssl.policy.backup.base_directory", "value_v5": "/etc/neo4j/default", "dynamic_v5": false, "description_v5": "The mandatory base directory for cryptographic objects of this policy. It is also possible to override each individual configuration with absolute paths.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.backup.ciphers", "value_v5": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "dynamic_v5": false, "description_v5": "Restrict allowed ciphers. Valid values depend on JRE and SSL however some examples can be found here https://docs.oracle.com/en/java/javase/11/docs/specs/security/standard-names.html#jsse-cipher-suite-names", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.backup.client_auth", "value_v5": "NONE", "dynamic_v5": false, "description_v5": "Client authentication stance.", "validValues_v5": "One of [NONE, OPTIONAL, REQUIRE].", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.backup.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "dbms.ssl.policy.backup.enabled, a boolean.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.backup.private_key", "value_v5": "/etc/neo4j/default/private.key", "dynamic_v5": false, "description_v5": "Private PKCS#8 key in PEM format.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.backup.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.backup.private_key_password", "value_v5": null, "dynamic_v5": false, "description_v5": "The passphrase for the private key.", "validValues_v5": "A secure string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.ssl.policy.backup.public_certificate", "value_v5": "/etc/neo4j/default/public.crt", "dynamic_v5": false, "description_v5": "X.509 certificate (chain) of this server in PEM format.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.backup.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.backup.revoked_dir", "value_v5": "/etc/neo4j/default/revoked", "dynamic_v5": false, "description_v5": "Path to directory of CRLs (Certificate Revocation Lists) in PEM format.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.backup.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.backup.tls_versions", "value_v5": "TLSv1.2", "dynamic_v5": false, "description_v5": "Restrict allowed TLS protocol versions.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.backup.trust_all", "value_v5": "false", "dynamic_v5": false, "description_v5": "Makes this policy trust all remote parties. Enabling this is not recommended and the trusted directory will be ignored.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.backup.trust_expired", "value_v5": "true", "dynamic_v5": false, "description_v5": "Makes this policy trust expired certificates. Enabling will also allow the instance to use an expired certificate itself.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.ssl.policy.backup.trusted_dir", "value_v5": "/etc/neo4j/default/trusted", "dynamic_v5": false, "description_v5": "Path to directory of X.509 certificates in PEM format for trusted parties.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.backup.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.backup.verify_hostname", "value_v5": "false", "dynamic_v5": false, "description_v5": "When true, this node will verify the hostname of every other instance it connects to by comparing the address it used to connect with it and the patterns described in the remote hosts public certificate Subject Alternative Names", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.base_directory", "value_v5": "/etc/neo4j/default", "dynamic_v5": false, "description_v5": "The mandatory base directory for cryptographic objects of this policy. It is also possible to override each individual configuration with absolute paths.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.ciphers", "value_v5": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "dynamic_v5": false, "description_v5": "Restrict allowed ciphers. Valid values depend on JRE and SSL however some examples can be found here https://docs.oracle.com/en/java/javase/11/docs/specs/security/standard-names.html#jsse-cipher-suite-names", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.client_auth", "value_v5": "NONE", "dynamic_v5": false, "description_v5": "Client authentication stance.", "validValues_v5": "One of [NONE, OPTIONAL, REQUIRE].", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "dbms.ssl.policy.bolt.enabled, a boolean.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.private_key", "value_v5": "/etc/neo4j/default/private.key", "dynamic_v5": false, "description_v5": "Private PKCS#8 key in PEM format.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.bolt.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.private_key_password", "value_v5": null, "dynamic_v5": false, "description_v5": "The passphrase for the private key.", "validValues_v5": "A secure string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.ssl.policy.bolt.public_certificate", "value_v5": "/etc/neo4j/default/public.crt", "dynamic_v5": false, "description_v5": "X.509 certificate (chain) of this server in PEM format.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.bolt.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.revoked_dir", "value_v5": "/etc/neo4j/default/revoked", "dynamic_v5": false, "description_v5": "Path to directory of CRLs (Certificate Revocation Lists) in PEM format.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.bolt.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.tls_versions", "value_v5": "TLSv1.2", "dynamic_v5": false, "description_v5": "Restrict allowed TLS protocol versions.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.trust_all", "value_v5": "false", "dynamic_v5": false, "description_v5": "Makes this policy trust all remote parties. Enabling this is not recommended and the trusted directory will be ignored.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.trust_expired", "value_v5": "true", "dynamic_v5": false, "description_v5": "Makes this policy trust expired certificates. Enabling will also allow the instance to use an expired certificate itself.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.ssl.policy.bolt.trusted_dir", "value_v5": "/etc/neo4j/default/trusted", "dynamic_v5": false, "description_v5": "Path to directory of X.509 certificates in PEM format for trusted parties.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.bolt.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.bolt.verify_hostname", "value_v5": "false", "dynamic_v5": false, "description_v5": "When true, this node will verify the hostname of every other instance it connects to by comparing the address it used to connect with it and the patterns described in the remote hosts public certificate Subject Alternative Names", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.base_directory", "value_v5": "/etc/neo4j/cluster_policy", "dynamic_v5": false, "description_v5": "The mandatory base directory for cryptographic objects of this policy. It is also possible to override each individual configuration with absolute paths.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.ciphers", "value_v5": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "dynamic_v5": false, "description_v5": "Restrict allowed ciphers. Valid values depend on JRE and SSL however some examples can be found here https://docs.oracle.com/en/java/javase/11/docs/specs/security/standard-names.html#jsse-cipher-suite-names", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.client_auth", "value_v5": "REQUIRE", "dynamic_v5": false, "description_v5": "Client authentication stance.", "validValues_v5": "One of [NONE, OPTIONAL, REQUIRE].", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "dbms.ssl.policy.cluster.enabled, a boolean.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.private_key", "value_v5": "/etc/neo4j/cluster_policy/private.key", "dynamic_v5": false, "description_v5": "Private PKCS#8 key in PEM format.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.cluster.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.private_key_password", "value_v5": null, "dynamic_v5": false, "description_v5": "The passphrase for the private key.", "validValues_v5": "A secure string.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.ssl.policy.cluster.public_certificate", "value_v5": "/etc/neo4j/cluster_policy/public.crt", "dynamic_v5": false, "description_v5": "X.509 certificate (chain) of this server in PEM format.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.cluster.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.revoked_dir", "value_v5": "/etc/neo4j/cluster_policy/revoked", "dynamic_v5": false, "description_v5": "Path to directory of CRLs (Certificate Revocation Lists) in PEM format.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.cluster.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.tls_versions", "value_v5": "TLSv1.2", "dynamic_v5": false, "description_v5": "Restrict allowed TLS protocol versions.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.trust_all", "value_v5": "false", "dynamic_v5": false, "description_v5": "Makes this policy trust all remote parties. Enabling this is not recommended and the trusted directory will be ignored.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.trust_expired", "value_v5": "true", "dynamic_v5": false, "description_v5": "Makes this policy trust expired certificates. Enabling will also allow the instance to use an expired certificate itself.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "dbms.ssl.policy.cluster.trusted_dir", "value_v5": "/etc/neo4j/cluster_policy/trusted", "dynamic_v5": false, "description_v5": "Path to directory of X.509 certificates in PEM format for trusted parties.", "validValues_v5": "A path. If relative, it is resolved from dbms.ssl.policy.cluster.base_directory.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.ssl.policy.cluster.verify_hostname", "value_v5": "false", "dynamic_v5": false, "description_v5": "When true, this node will verify the hostname of every other instance it connects to by comparing the address it used to connect with it and the patterns described in the remote hosts public certificate Subject Alternative Names", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "dbms.usage_report.enabled", "value_v5": "false", "dynamic_v5": false, "description_v5": "Anonymous Usage Data reporting.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "initial.dbms.automatically_enable_free_servers", "value_v5": "true", "dynamic_v5": false, "description_v5": "Automatically enable free servers.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "initial.dbms.database_allocator", "value_v5": "EQUAL_NUMBERS", "dynamic_v5": false, "description_v5": "Name of the initial database allocator. After the creation of the DBMS, it can be set by running the `dbms.setDatabaseAllocator` procedure.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "initial.dbms.default_database", "value_v5": "graph.db", "dynamic_v5": false, "description_v5": "Name of the default database (aliases are not supported).", "validValues_v5": "A valid database name containing only alphabetic characters, numbers, dots, and dashes with a length between 3 and 63 characters, starting with an alphabetic character but not with the name `system`.", "isExplicitlySet_v5": true }, { "name_v5": "initial.dbms.default_primaries_count", "value_v5": "3", "dynamic_v5": false, "description_v5": "The initial default number of primaries for the standard databases. If the user does not specify the number of primaries in `CREATE DATABASE`, this value will be used unless overwritten bythe `dbms.setDefaultAllocationNumbers` procedure.", "validValues_v5": "An integer that is minimum `1` and is maximum `11`.", "isExplicitlySet_v5": true }, { "name_v5": "initial.dbms.default_secondaries_count", "value_v5": "0", "dynamic_v5": false, "description_v5": "The initial default number of secondaries for the standard databases. If the user does not specify the number of secondaries in `CREATE DATABASE`, this value will be used unless overwritten by the `dbms.setDefaultAllocationNumbers` procedure.", "validValues_v5": "An integer that is minimum `0` and is maximum `20`.", "isExplicitlySet_v5": false }, { "name_v5": "initial.server.allowed_databases", "value_v5": "", "dynamic_v5": false, "description_v5": "Names of the databases allowed on this server; all others are denied. Empty means all are allowed. This configuration can be overridden when enabling the server or altered at runtime without changing this setting. Exclusive with `initial.server.denied_databases`.", "validValues_v5": "A comma-separated set where each element is a valid database name containing only alphabetic characters, numbers, dots, and dashes with a length between 3 and 63 characters, starting with an alphabetic character but not with the name `system`.", "isExplicitlySet_v5": false }, { "name_v5": "initial.server.denied_databases", "value_v5": "", "dynamic_v5": false, "description_v5": "Names of the databases not allowed on this server. Empty means nothing is denied. This configuration can be overridden when enabling the server or altered at runtime without changing this setting. Exclusive with `initial.server.allowed_databases`.", "validValues_v5": "A comma-separated set where each element is a valid database name containing only alphabetic characters, numbers, dots, and dashes with a length between 3 and 63 characters, starting with an alphabetic character but not with the name `system`.", "isExplicitlySet_v5": false }, { "name_v5": "initial.server.mode_constraint", "value_v5": "PRIMARY", "dynamic_v5": false, "description_v5": "An server can restrict itself to allow databases to be hosted only as primaries or secondaries. This setting is the default input for the `ENABLE SERVER` command - the user can overwrite it when executing the command.", "validValues_v5": "One of [PRIMARY, SECONDARY, NONE].", "isExplicitlySet_v5": true }, { "name_v5": "initial.server.tags", "value_v5": "neo4j_orchard", "dynamic_v5": false, "description_v5": "A list of tag names for the server used when configuring load balancing and replication policies.This setting is the default input for the `ENABLE SERVER` command - the user can overwrite it when executing the command.", "validValues_v5": "A comma-separated list where each element is a string identifying a server tag, which contains no duplicate items.", "isExplicitlySet_v5": true }, { "name_v5": "server.backup.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable support for running online backups.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "server.backup.exec_connector.command", "value_v5": "", "dynamic_v5": false, "description_v5": "Command to execute for ExecDataConnector list", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "server.backup.exec_connector.scheme", "value_v5": "", "dynamic_v5": false, "description_v5": "Schemes ExecDataConnector will match on", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": false }, { "name_v5": "server.backup.listen_address", "value_v5": "10.101.2.110:6362", "dynamic_v5": false, "description_v5": "Network interface and port for the backup server to listen on.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`.", "isExplicitlySet_v5": true }, { "name_v5": "server.backup.store_copy_max_retry_time_per_request", "value_v5": "20m", "dynamic_v5": false, "description_v5": "Maximum retry time per request during store copy. Regular store files and indexes are downloaded in separate requests during store copy. This configures the maximum time failed requests are allowed to resend. ", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.additional_listen_addresses", "value_v5": "", "dynamic_v5": false, "description_v5": "Additional addresses the connector should bind to.", "validValues_v5": "A comma-separated set where each element is a socket address in the format of `hostname:port`, `hostname`, or `:port`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.advertised_address", "value_v5": "dev-neo4j-5-cluster-i-0ebc422665deaad72.dev.theorchard.io:7687", "dynamic_v5": false, "description_v5": "Advertised address for this connector.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port` that is an accessible address. If missing, it is acquired from server.default_advertised_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.bolt.connection_keep_alive", "value_v5": "1m", "dynamic_v5": false, "description_v5": "The maximum time to wait before sending a NOOP on connections waiting for responses from active ongoing queries. The minimum value is 1 millisecond.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `1ms`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.connection_keep_alive_for_requests", "value_v5": "ALL", "dynamic_v5": false, "description_v5": "The type of messages to enable keep-alive messages for `ALL`, `STREAMING`, or `OFF`.", "validValues_v5": "One of [ALL, STREAMING, OFF].", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.connection_keep_alive_probes", "value_v5": "2", "dynamic_v5": false, "description_v5": "The total number of probes to be missed before a connection is considered stale. The minimum value is 1.", "validValues_v5": "An integer that is minimum `1`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.connection_keep_alive_streaming_scheduling_interval", "value_v5": "1m", "dynamic_v5": false, "description_v5": "The interval between every scheduled keep-alive check on all connections with active queries. Zero duration turns off keep-alive service.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `0s`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.enable_network_error_accounting", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enables accounting-based reporting of benign errors within the Bolt stack. When enabled, benign errors are reported only when such events occur with unusual frequency. When disabled, all benign network errors are reported.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable the Bolt connector.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "server.bolt.listen_address", "value_v5": "10.101.2.110:7687", "dynamic_v5": false, "description_v5": "Address the connector should bind to.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`. If missing, it is acquired from server.default_listen_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.bolt.network_abort_clear_window_duration", "value_v5": "10m", "dynamic_v5": false, "description_v5": "The duration for which network-related connection aborts need to remain at a reasonable level before the error is cleared.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `1s`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.network_abort_warn_threshold", "value_v5": "2", "dynamic_v5": false, "description_v5": "The maximum number of network-related connection aborts allowed within a specified time window before emitting log messages. A value of zero reverts to legacy warning behavior.", "validValues_v5": "A long that is minimum `0`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.network_abort_warn_window_duration", "value_v5": "10m", "dynamic_v5": false, "description_v5": "The duration of the window in which network-related connection aborts are sampled.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `1s`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.ocsp_stapling_enabled", "value_v5": "false", "dynamic_v5": false, "description_v5": "Enable server OCSP stapling for bolt and http connectors.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.telemetry.enabled", "value_v5": "false", "dynamic_v5": false, "description_v5": "Enable the collection of driver telemetry.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.thread_pool_keep_alive", "value_v5": "5m", "dynamic_v5": false, "description_v5": "The maximum time an idle thread in the thread pool bound to this connector waits for new tasks.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.thread_pool_max_size", "value_v5": "400", "dynamic_v5": false, "description_v5": "The maximum number of threads allowed in the thread pool bound to this connector.", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.thread_pool_min_size", "value_v5": "5", "dynamic_v5": false, "description_v5": "The number of threads, including idle, to keep in the thread pool bound to this connector.", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.thread_starvation_clear_window_duration", "value_v5": "10m", "dynamic_v5": false, "description_v5": "The duration for which unscheduled requests need to remain at a reasonable level before the error is cleared.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `1s`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.thread_starvation_warn_threshold", "value_v5": "2", "dynamic_v5": false, "description_v5": "The maximum number of unscheduled requests allowed during thread starvation events within a specified time window before emitting log messages. A value of zero reverts to legacy error behavior.", "validValues_v5": "A long that is minimum `0`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.thread_starvation_warn_window_duration", "value_v5": "10m", "dynamic_v5": false, "description_v5": "The duration of the window in which unscheduled requests are sampled.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `1s`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.tls_level", "value_v5": "REQUIRED", "dynamic_v5": false, "description_v5": "The encryption level to be used to secure communications with this connector.", "validValues_v5": "One of [REQUIRED, OPTIONAL, DISABLED].", "isExplicitlySet_v5": true }, { "name_v5": "server.bolt.traffic_accounting_check_period", "value_v5": "5m", "dynamic_v5": false, "description_v5": "Amount of time spent between samples of current traffic usage. Lower values result in more accurate reporting while incurring a higher performance penalty. A value of zero disables traffic accounting.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is `0s` or is minimum `1m`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.traffic_accounting_clear_duration", "value_v5": "10m", "dynamic_v5": false, "description_v5": "Time to be spent below the configured traffic threshold to clear traffic warnings.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `1m`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.traffic_accounting_incoming_threshold_mbps", "value_v5": "950", "dynamic_v5": false, "description_v5": "Maximum permitted incoming traffic within a configured accounting check window before emitting a warning (in Mbps).", "validValues_v5": "A long that is minimum `1`.", "isExplicitlySet_v5": false }, { "name_v5": "server.bolt.traffic_accounting_outgoing_threshold_mbps", "value_v5": "950", "dynamic_v5": false, "description_v5": "Maximum permitted outgoing traffic within a configured accounting check window before emitting a warning (in Mbps).", "validValues_v5": "A long that is minimum `1`.", "isExplicitlySet_v5": false }, { "name_v5": "server.cluster.advertised_address", "value_v5": "10.101.2.110:6000", "dynamic_v5": false, "description_v5": "Advertised hostname/IP address and port for the transaction shipping server.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port` that is an accessible address. If missing, it is acquired from server.default_advertised_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.cluster.catchup.connect_randomly_to_server_group", "value_v5": "", "dynamic_v5": true, "description_v5": "Comma-separated list of groups to be used by the connect-randomly-to-server-group selection strategy. The connect-randomly-to-server-group strategy is used when the list of strategies (`<>`) includes the value `connect-randomly-to-server-group`.", "validValues_v5": "A comma-separated list where each element is a string identifying a server tag.", "isExplicitlySet_v5": false }, { "name_v5": "server.cluster.catchup.connect_randomly_to_server_tags", "value_v5": "", "dynamic_v5": true, "description_v5": "Comma-separated list of tags to be used by the connect-randomly-to-server-with-tag selection strategy. The connect-randomly-to-server-with-tag strategy is used when the list of strategies (`<>`) includes the value `connect-randomly-to-server-with-tag`.", "validValues_v5": "A comma-separated list where each element is a string identifying a server tag.", "isExplicitlySet_v5": false }, { "name_v5": "server.cluster.catchup.upstream_strategy", "value_v5": "", "dynamic_v5": false, "description_v5": "A descending-ordered list of strategies secondaries use to choose the upstream server from which to pull transactional updates. If none are valid or the list is empty, the default strategy is `typically-connect-to-random-secondary`.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": false }, { "name_v5": "server.cluster.catchup.user_defined_upstream_strategy", "value_v5": "", "dynamic_v5": false, "description_v5": "Configuration of a user-defined upstream selection strategy. The user-defined strategy is used when the list of strategies (`<>`) includes the value `user_defined`.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "server.cluster.listen_address", "value_v5": "10.101.2.110:6000", "dynamic_v5": false, "description_v5": "Network interface and port for the transaction shipping server to listen on. Note that it is also possible to run the backup client against this port, so always limit access to it via the firewall and configure an SSL policy.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`. If missing, it is acquired from server.default_listen_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.cluster.network.native_transport_enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Use native transport if available. Epoll for Linux or Kqueue for MacOS/BSD. If this setting is set to false, or if native transport is not available, Nio transport will be used.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.cluster.raft.advertised_address", "value_v5": "10.101.2.110:7000", "dynamic_v5": false, "description_v5": "Advertised hostname/IP address and port for the RAFT server.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port` that is an accessible address. If missing, it is acquired from server.default_advertised_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.cluster.raft.listen_address", "value_v5": "10.101.2.110:7000", "dynamic_v5": false, "description_v5": "Network interface and port for the RAFT server to listen on.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`. If missing, it is acquired from server.default_listen_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.cluster.system_database_mode", "value_v5": "PRIMARY", "dynamic_v5": false, "description_v5": "Users must manually specify the mode for the system database on each server.", "validValues_v5": "One of [PRIMARY, SECONDARY].", "isExplicitlySet_v5": true }, { "name_v5": "server.config.strict_validation.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "A strict configuration validation will prevent the database from starting up if unknown configuration options are specified in the neo4j settings namespace (such as dbms., cypher., etc) or if settings are declared multiple times.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.cypher.parallel.worker_limit", "value_v5": "0", "dynamic_v5": false, "description_v5": "Number of threads to allocate to Cypher worker threads for the parallel runtime. If set to a positive number, that number of workers will be started. If set to 0, one worker will be started for every logical processor available to the Java Virtual Machine. If set to a negative number, the total number of logical processors available on the server will be reduced by the absolute value of that number. For example, if the server has 16 available processors and you set `server.cypher.parallel.worker_limit` to `-1`, the parallel runtime will have 15 threads available.", "validValues_v5": "An integer.", "isExplicitlySet_v5": false }, { "name_v5": "server.databases.default_to_read_only", "value_v5": "false", "dynamic_v5": true, "description_v5": "Whether or not any database on this instance are read_only by default. If false, individual databases may be marked as read_only using server.database.read_only. If true, individual databases may be marked as writable using server.databases.writable.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.databases.read_only", "value_v5": "", "dynamic_v5": true, "description_v5": "List of databases for which to prevent write queries. Databases not included in this list maybe read_only anyway depending upon the value of server.databases.default_to_read_only.", "validValues_v5": "A comma-separated set where each element is a valid database name containing only alphabetic characters, numbers, dots, and dashes with a length between 3 and 63 characters, starting with an alphabetic character but not with the name `system`.", "isExplicitlySet_v5": false }, { "name_v5": "server.databases.writable", "value_v5": "", "dynamic_v5": true, "description_v5": "List of databases for which to allow write queries. Databases not included in this list will allow write queries anyway, unless server.databases.default_to_read_only is set to true.", "validValues_v5": "A comma-separated set where each element is a valid database name containing only alphabetic characters, numbers, dots, and dashes with a length between 3 and 63 characters, starting with an alphabetic character but not with the name `system`.", "isExplicitlySet_v5": false }, { "name_v5": "server.db.query_cache_size", "value_v5": "1000", "dynamic_v5": false, "description_v5": "The number of cached queries per database. Use `server.memory.query_cache.per_db_cache_num_entries` instead.", "validValues_v5": "An integer that is minimum `0`.", "isExplicitlySet_v5": false }, { "name_v5": "server.default_advertised_address", "value_v5": "10.101.2.110", "dynamic_v5": false, "description_v5": "Default hostname or IP address the server uses to advertise itself.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port` that has no specified port and is an accessible address.", "isExplicitlySet_v5": true }, { "name_v5": "server.default_listen_address", "value_v5": "10.101.2.110", "dynamic_v5": false, "description_v5": "Default network interface to listen for incoming connections. To listen for connections on all interfaces, use \"0.0.0.0\". ", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port` that has no specified port.", "isExplicitlySet_v5": true }, { "name_v5": "server.directories.cluster_state", "value_v5": "/var/lib/neo4j/data/cluster-state", "dynamic_v5": false, "description_v5": "Directory to hold cluster state including Raft log", "validValues_v5": "A path. If relative, it is resolved from server.directories.data.", "isExplicitlySet_v5": false }, { "name_v5": "server.directories.data", "value_v5": "/var/lib/neo4j/data", "dynamic_v5": false, "description_v5": "Path of the data directory. You must not configure more than one Neo4j installation to use the same data directory.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": true }, { "name_v5": "server.directories.dumps.root", "value_v5": "/var/lib/neo4j/data/dumps", "dynamic_v5": false, "description_v5": "Root location where Neo4j will store database dumps optionally produced when dropping said databases.", "validValues_v5": "A path. If relative, it is resolved from server.directories.data.", "isExplicitlySet_v5": false }, { "name_v5": "server.directories.import", "value_v5": "/var/lib/neo4j/import", "dynamic_v5": false, "description_v5": "Sets the root directory for file URLs used with the Cypher `LOAD CSV` clause. This should be set to a directory relative to the Neo4j installation path, restricting access to only those files within that directory and its subdirectories. For example the value \"import\" will only enable access to files within the 'import' folder. Removing this setting will disable the security feature, allowing all files in the local system to be imported. Setting this to an empty field will allow access to all files within the Neo4j installation folder.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": true }, { "name_v5": "server.directories.lib", "value_v5": "/usr/share/neo4j/lib", "dynamic_v5": false, "description_v5": "Path of the lib directory", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": true }, { "name_v5": "server.directories.licenses", "value_v5": "/var/lib/neo4j/licenses", "dynamic_v5": false, "description_v5": "Path of the licenses directory.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": false }, { "name_v5": "server.directories.logs", "value_v5": "/var/log/neo4j", "dynamic_v5": false, "description_v5": "Path of the logs directory.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": true }, { "name_v5": "server.directories.metrics", "value_v5": "/var/lib/neo4j/metrics", "dynamic_v5": false, "description_v5": "The target location of the CSV files: a path to a directory wherein a CSV file per reported field will be written.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": false }, { "name_v5": "server.directories.neo4j_home", "value_v5": "/var/lib/neo4j", "dynamic_v5": false, "description_v5": "Root relative to which directory settings are resolved. Calculated and set by the server on startup.Defaults to the current working directory.", "validValues_v5": "A path that is absolute.", "isExplicitlySet_v5": true }, { "name_v5": "server.directories.plugins", "value_v5": "/var/lib/neo4j/plugins", "dynamic_v5": false, "description_v5": "Location of the database plugin directory. Compiled Java JAR files that contain database procedures will be loaded if they are placed in this directory.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": true }, { "name_v5": "server.directories.run", "value_v5": "/var/run/neo4j", "dynamic_v5": false, "description_v5": "Path of the run directory. This directory holds Neo4j's runtime state, such as a pidfile when it is running in the background. The pidfile is created when starting neo4j and removed when stopping it. It may be placed on an in-memory filesystem such as tmpfs.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": true }, { "name_v5": "server.directories.script.root", "value_v5": "/var/lib/neo4j/data/scripts", "dynamic_v5": false, "description_v5": "Root location where Neo4j will store scripts for configured databases.", "validValues_v5": "A path. If relative, it is resolved from server.directories.data.", "isExplicitlySet_v5": false }, { "name_v5": "server.directories.transaction.logs.root", "value_v5": "/var/lib/neo4j/data/transactions", "dynamic_v5": false, "description_v5": "Root location where Neo4j will store transaction logs for configured databases.", "validValues_v5": "A path. If relative, it is resolved from server.directories.data.", "isExplicitlySet_v5": false }, { "name_v5": "server.discovery.advertised_address", "value_v5": "10.101.2.110:5000", "dynamic_v5": false, "description_v5": "Advertised cluster member discovery management communication.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port` that is an accessible address. If missing, it is acquired from server.default_advertised_address.", "isExplicitlySet_v5": false }, { "name_v5": "server.discovery.listen_address", "value_v5": "10.101.2.110:5000", "dynamic_v5": false, "description_v5": "Host and port to bind the cluster member discovery management communication.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`. If missing, it is acquired from server.default_listen_address.", "isExplicitlySet_v5": false }, { "name_v5": "server.dynamic.setting.allowlist", "value_v5": "*", "dynamic_v5": false, "description_v5": "A list of setting name patterns (comma separated) that are allowed to be dynamically changed. The list may contain both full setting names, and partial names with the wildcard '*'. If this setting is left empty all dynamic settings updates will be blocked.", "validValues_v5": "A comma-separated list where each element is a string.", "isExplicitlySet_v5": false }, { "name_v5": "server.groups", "value_v5": "", "dynamic_v5": false, "description_v5": "A list of tag names for the server used when configuring load balancing and replication policies.", "validValues_v5": "A comma-separated list where each element is a string identifying a server tag.", "isExplicitlySet_v5": false }, { "name_v5": "server.http.advertised_address", "value_v5": "127.0.0.1:7474", "dynamic_v5": false, "description_v5": "Advertised address for this connector.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port` that is an accessible address. If missing, it is acquired from server.default_advertised_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.http.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable the HTTP connector.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.http.listen_address", "value_v5": "127.0.0.1:7474", "dynamic_v5": false, "description_v5": "Address the connector should bind to.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`. If missing, it is acquired from server.default_listen_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.http.transaction_idle_timeout", "value_v5": "30s", "dynamic_v5": false, "description_v5": "Timeout for idle transactions in the HTTP Server. Note: this is different from 'db.transaction.timeout' which will timeout the underlying transaction.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "server.http_enabled_modules", "value_v5": "TRANSACTIONAL_ENDPOINTS,UNMANAGED_EXTENSIONS,BROWSER,ENTERPRISE_MANAGEMENT_ENDPOINTS,QUERY_API_ENDPOINTS", "dynamic_v5": false, "description_v5": "Defines the set of modules loaded into the Neo4j web server. The enterprise management endpoints are only available in the Еnterprise edition.", "validValues_v5": "A comma-separated set where each element is one of [TRANSACTIONAL_ENDPOINTS, UNMANAGED_EXTENSIONS, BROWSER, ENTERPRISE_MANAGEMENT_ENDPOINTS, QUERY_API_ENDPOINTS].", "isExplicitlySet_v5": false }, { "name_v5": "server.http_enabled_transports", "value_v5": "HTTP1_1,HTTP2", "dynamic_v5": false, "description_v5": "Defines the set of transports available on the HTTP server.", "validValues_v5": "A comma-separated set where each element is one of [HTTP1_1, HTTP2].", "isExplicitlySet_v5": false }, { "name_v5": "server.https.advertised_address", "value_v5": "10.101.2.110:7473", "dynamic_v5": false, "description_v5": "Advertised address for this connector.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port` that is an accessible address. If missing, it is acquired from server.default_advertised_address.", "isExplicitlySet_v5": false }, { "name_v5": "server.https.enabled", "value_v5": "false", "dynamic_v5": false, "description_v5": "Enable the HTTPS connector.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "server.https.listen_address", "value_v5": "10.101.2.110:7473", "dynamic_v5": false, "description_v5": "Address the connector should bind to.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`. If missing, it is acquired from server.default_listen_address.", "isExplicitlySet_v5": false }, { "name_v5": "server.jvm.additional", "value_v5": "-XX:+UseG1GC\n-XX:-OmitStackTraceInFastThrow\n-XX:+AlwaysPreTouch\n-XX:+UnlockExperimentalVMOptions\n-XX:+TrustFinalNonStaticFields\n-XX:+DisableExplicitGC\n-XX:MaxInlineLevel=15-Djdk.nio.maxCachedBufferSize=262144-Dio.netty.tryReflectionSetAccessible=true-Djdk.tls.ephemeralDHKeySize=2048-Djdk.tls.rejectClientInitiatedRenegotiation=true\n-XX:FlightRecorderOptions=stackdepth=256\n-XX:+UnlockDiagnosticVMOptions\n-XX:+DebugNonSafepoints-Dlog4j2.disable.jmx=true\n-XX:+ExitOnOutOfMemoryError-Dunsupported.dbms.udc.source=rpm\n-XX:ParallelGCThreads=2", "dynamic_v5": false, "description_v5": "Additional JVM arguments. Please note that argument order can be significant.", "validValues_v5": "One or more jvm arguments.", "isExplicitlySet_v5": true }, { "name_v5": "server.logs.config", "value_v5": "/var/lib/neo4j/conf/server-logs.xml", "dynamic_v5": false, "description_v5": "Path to the logging configuration for debug, query, http and security logs.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": false }, { "name_v5": "server.logs.debug.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable the debug log.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.logs.gc.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable GC Logging", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "server.logs.gc.options", "value_v5": "-Xlog:gc*,safepoint,age*=trace", "dynamic_v5": false, "description_v5": "GC Logging Options", "validValues_v5": "A string.", "isExplicitlySet_v5": true }, { "name_v5": "server.logs.gc.rotation.keep_number", "value_v5": "5", "dynamic_v5": false, "description_v5": "Number of GC logs to keep.", "validValues_v5": "An integer.", "isExplicitlySet_v5": true }, { "name_v5": "server.logs.gc.rotation.size", "value_v5": "20.00MiB", "dynamic_v5": false, "description_v5": "Size of each GC log that is kept.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`).", "isExplicitlySet_v5": true }, { "name_v5": "server.logs.user.config", "value_v5": "/var/lib/neo4j/conf/user-logs.xml", "dynamic_v5": false, "description_v5": "Path to the logging configuration of user logs.", "validValues_v5": "A path. If relative, it is resolved from server.directories.neo4j_home.", "isExplicitlySet_v5": false }, { "name_v5": "server.max_databases", "value_v5": "100", "dynamic_v5": false, "description_v5": "The maximum number of databases. Use dbms.max_databases instead.", "validValues_v5": "A long that is minimum `2`.", "isExplicitlySet_v5": false }, { "name_v5": "server.memory.heap.initial_size", "value_v5": "8.00GiB", "dynamic_v5": false, "description_v5": "Initial heap size. By default it is calculated based on available system resources.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`).", "isExplicitlySet_v5": true }, { "name_v5": "server.memory.heap.max_size", "value_v5": "8.00GiB", "dynamic_v5": false, "description_v5": "Maximum heap size. By default it is calculated based on available system resources.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`).", "isExplicitlySet_v5": true }, { "name_v5": "server.memory.off_heap.block_cache_size", "value_v5": "128", "dynamic_v5": false, "description_v5": "Defines the size of the off-heap memory blocks cache. The cache will contain this number of blocks for each block size that is power of two. Thus, maximum amount of memory used by blocks cache can be calculated as 2 * server.memory.off_heap.max_cacheable_block_size * server.memory.off_heap.block_cache_size", "validValues_v5": "An integer that is minimum `16`.", "isExplicitlySet_v5": false }, { "name_v5": "server.memory.off_heap.max_cacheable_block_size", "value_v5": "512.00KiB", "dynamic_v5": false, "description_v5": "Defines the maximum size of an off-heap memory block that can be cached to speed up allocations. The value must be a power of 2.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`) that is minimum `4.00KiB` and is power of 2.", "isExplicitlySet_v5": false }, { "name_v5": "server.memory.off_heap.transaction_max_size", "value_v5": "2.00GiB", "dynamic_v5": false, "description_v5": "The maximum amount of off-heap memory that can be used to store transaction state data; it's a total amount of memory shared across all active transactions. Zero means 'unlimited'. Used when db.tx_state.memory_allocation is set to 'OFF_HEAP'.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`) that is minimum `0B`.", "isExplicitlySet_v5": false }, { "name_v5": "server.memory.pagecache.directio", "value_v5": "false", "dynamic_v5": false, "description_v5": "Use direct I/O for page cache. Setting is supported only on Linux and only for a subset of record formats that use platform aligned page size.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.memory.pagecache.flush.buffer.enabled", "value_v5": "false", "dynamic_v5": true, "description_v5": "Page cache can be configured to use a temporal buffer for flushing purposes. It is used to combine, if possible, sequence of several cache pages into one bigger buffer to minimize the number of individual IOPS performed and better utilization of available I/O resources, especially when those are restricted.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.memory.pagecache.flush.buffer.size_in_pages", "value_v5": "128", "dynamic_v5": true, "description_v5": "Page cache can be configured to use a temporal buffer for flushing purposes. It is used to combine, if possible, sequence of several cache pages into one bigger buffer to minimize the number of individual IOPS performed and better utilization of available I/O resources, especially when those are restricted. Use this setting to configure individual file flush buffer size in pages (8KiB). To be able to utilize this buffer during page cache flushing, buffered flush should be enabled.", "validValues_v5": "An integer that is in the range `1` to `512`.", "isExplicitlySet_v5": false }, { "name_v5": "server.memory.pagecache.scan.prefetchers", "value_v5": "4", "dynamic_v5": false, "description_v5": "The maximum number of worker threads to use for pre-fetching data when doing sequential scans. Set to '0' to disable pre-fetching for scans.", "validValues_v5": "An integer that is in the range `0` to `255`.", "isExplicitlySet_v5": false }, { "name_v5": "server.memory.pagecache.size", "value_v5": "11.18GiB", "dynamic_v5": false, "description_v5": "The amount of memory to use for mapping the store files. If Neo4j is running on a dedicated server, then it is generally recommended to leave about 2-4 gigabytes for the operating system, give the JVM enough heap to hold all your transaction state and query context, and then leave the rest for the page cache. If no page cache memory is configured, then a heuristic setting is computed based on available system resources.By default, the size of page cache is 50% of available RAM minus the max heap size (but not larger than 70x the max heap size, due to some overhead of the page cache in the heap).", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`).", "isExplicitlySet_v5": true }, { "name_v5": "server.memory.query_cache.per_db_cache_num_entries", "value_v5": "1000", "dynamic_v5": true, "description_v5": "The number of cached queries per database. The max number of queries that can be kept in a cache is `number of databases` * `server.memory.query_cache.per_db_cache_num_entries`. With 10 databases and `server.memory.query_cache.per_db_cache_num_entries`=1000, the cache can keep 10000 plans in total. This setting is only deciding cache size when `server.memory.query_cache.sharing_enabled` is set to `false`.", "validValues_v5": "An integer that is minimum `0`.", "isExplicitlySet_v5": false }, { "name_v5": "server.memory.query_cache.shared_cache_num_entries", "value_v5": "1000", "dynamic_v5": true, "description_v5": "The number of cached queries for all databases. The max number of queries that can be kept in a cache is exactly `server.memory.query_cache.shared_cache_num_entries`. This setting is only deciding cache size when `server.memory.query_cache.sharing_enabled` is set to `true`.", "validValues_v5": "An integer that is minimum `0`.", "isExplicitlySet_v5": false }, { "name_v5": "server.memory.query_cache.sharing_enabled", "value_v5": "false", "dynamic_v5": false, "description_v5": "Enable sharing cache space between different databases. With this option turned on, databases will share cache space, but not cache entries. This means that a database may store and retrieve entries from the shared cache, but it may not retrieve entries produced by another database. The database may, however, evict entries from other databases as necessary, according to the constrained cache size and cache eviction policy. In essence, databases may compete for cache space, but may not observe each others entries.When this option is turned on, the cache space available to all databases is configured with `server.memory.query_cache.shared_cache_num_entries`. With this option turned off, the cache space available to each individual database is configured with `server.memory.query_cache.per_db_cache_num_entries`.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.metrics.csv.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Set to `true` to enable exporting metrics to CSV files", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.metrics.csv.interval", "value_v5": "30s", "dynamic_v5": false, "description_v5": "The reporting interval for the CSV files. That is, how often new rows with numbers are appended to the CSV files.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`) that is minimum `1ms`.", "isExplicitlySet_v5": false }, { "name_v5": "server.metrics.csv.rotation.compression", "value_v5": "ZIP", "dynamic_v5": false, "description_v5": "Decides what compression to use for the csv history files.", "validValues_v5": "One of [NONE, ZIP, GZ].", "isExplicitlySet_v5": true }, { "name_v5": "server.metrics.csv.rotation.keep_number", "value_v5": "7", "dynamic_v5": false, "description_v5": "Maximum number of history files for the csv files.", "validValues_v5": "An integer that is minimum `1`.", "isExplicitlySet_v5": false }, { "name_v5": "server.metrics.csv.rotation.size", "value_v5": "10.00MiB", "dynamic_v5": false, "description_v5": "The file size in bytes at which the csv files will auto-rotate. If set to zero then no rotation will occur. Accepts a binary suffix `k`, `m` or `g`.", "validValues_v5": "A byte size (valid multipliers are `B`, `KiB`, `KB`, `K`, `kB`, `kb`, `k`, `MiB`, `MB`, `M`, `mB`, `mb`, `m`, `GiB`, `GB`, `G`, `gB`, `gb`, `g`, `TiB`, `TB`, `PiB`, `PB`, `EiB`, `EB`) that is in the range `0B` to `8388608.00TiB`.", "isExplicitlySet_v5": false }, { "name_v5": "server.metrics.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Enable metrics. Setting this to `false` will to turn off all metrics.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "server.metrics.filter", "value_v5": "*", "dynamic_v5": false, "description_v5": "Specifies which metrics should be enabled by using a comma separated list of globbing patterns. Only the metrics matching the filter will be enabled. For example `*check_point*,neo4j.page_cache.evictions` will enable any checkpoint metrics and the pagecache eviction metric.", "validValues_v5": "A comma-separated list where each element is A simple globbing pattern that can use `*` and `?`..", "isExplicitlySet_v5": true }, { "name_v5": "server.metrics.graphite.enabled", "value_v5": "false", "dynamic_v5": false, "description_v5": "Set to `true` to enable exporting metrics to Graphite.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.metrics.graphite.interval", "value_v5": "30s", "dynamic_v5": false, "description_v5": "The reporting interval for Graphite. That is, how often to send updated metrics to Graphite.", "validValues_v5": "A duration (Valid units are: `ns`, `μs`, `ms`, `s`, `m`, `h` and `d`; default unit is `s`).", "isExplicitlySet_v5": false }, { "name_v5": "server.metrics.graphite.server", "value_v5": "10.101.2.110:2003", "dynamic_v5": false, "description_v5": "The hostname or IP address of the Graphite server", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`. If missing, it is acquired from server.default_listen_address.", "isExplicitlySet_v5": false }, { "name_v5": "server.metrics.jmx.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Set to `true` to enable the JMX metrics endpoint", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "server.metrics.prefix", "value_v5": "neo4j", "dynamic_v5": false, "description_v5": "A common prefix for the reported metrics field names.", "validValues_v5": "A string.", "isExplicitlySet_v5": false }, { "name_v5": "server.metrics.prometheus.enabled", "value_v5": "true", "dynamic_v5": false, "description_v5": "Set to `true` to enable the Prometheus endpoint", "validValues_v5": "A boolean.", "isExplicitlySet_v5": true }, { "name_v5": "server.metrics.prometheus.endpoint", "value_v5": "localhost:2004", "dynamic_v5": false, "description_v5": "The hostname and port to use as Prometheus endpoint", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`. If missing, it is acquired from server.default_listen_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.panic.shutdown_on_panic", "value_v5": "false", "dynamic_v5": false, "description_v5": "If there is a server panic (an unrecoverable error) should the neo4j process shut down or continue running. Following a server panic it is likely that a significant amount of functionality will be lost. Recovering full functionality will require the Neo4j process to restart. This feature is available in Neo4j Enterprise Edition.Defaults to `false` except for Neo4j Enterprise Edition deployments running on Kubernetes where it is `true`.", "validValues_v5": "A boolean.", "isExplicitlySet_v5": false }, { "name_v5": "server.routing.advertised_address", "value_v5": "dev-neo4j-5-cluster-i-0ebc422665deaad72.dev.theorchard.io:7688", "dynamic_v5": false, "description_v5": "The advertised address for the intra-cluster routing connector.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port` that is an accessible address. If missing, it is acquired from server.default_advertised_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.routing.listen_address", "value_v5": "10.101.2.110:7688", "dynamic_v5": false, "description_v5": "Address routing connector should bind to.", "validValues_v5": "A socket address in the format of `hostname:port`, `hostname`, or `:port`. If missing, it is acquired from server.default_listen_address.", "isExplicitlySet_v5": true }, { "name_v5": "server.threads.worker_count", "value_v5": "4", "dynamic_v5": false, "description_v5": "Number of Neo4j worker threads. This setting is only valid for REST, and does not influence bolt-server. It sets the amount of worker threads for the Jetty server used by neo4j-server. This option can be tuned when you plan to execute multiple, concurrent REST requests, with the aim of getting more throughput from the database. By default, it is set to the number of available processors, or to 500 for machines with more than 500 processors. Your OS might enforce a lower limit than the maximum value specified here.", "validValues_v5": "An integer that is in the range `1` to `44738`.", "isExplicitlySet_v5": false }, { "name_v5": "server.unmanaged_extension_classes", "value_v5": "", "dynamic_v5": false, "description_v5": "Comma-separated list of = for unmanaged extensions.", "validValues_v5": "A comma-separated list where each element is = string.", "isExplicitlySet_v5": false }, { "name_v5": "server.windows_service_name", "value_v5": "neo4j", "dynamic_v5": false, "description_v5": "Name of the Windows Service managing Neo4j when installed using `neo4j install-service`. Only applicable on Windows OS. Note: This must be unique for each individual installation.", "validValues_v5": "A string.", "isExplicitlySet_v5": false } ]